Re: OpenVPN forwarding?

Stephen Carville
Thu, 30 Dec 2004 10:13:42 -0000

On Thursday 30 December 2004 12:25 am, Jan Johansson
wrote:
> I am looking at terminating a OpenVPN tunnel on my shorewall box, but
> selectivly forward incoming traffic from the VPN tunnel to various hosts
> on my LOC-zone. Is this doable? Or need I set up OpenVPN tunnels that
> terminates on the LOC-hosts in question directly?

An OpenVPN tunnel is a zone like other zones and, in my experience so far, the
same rules apply.  You have to have a policy and, if necessary, a set of
rules describing the exceptions to that policy.  What you describe sounds
like DNAT which I have never used on tunnel interface but should be trivial
for you to test.

> (Or rather: Which page on the web site have I neglected to read _this_
> time?)

--
Stephen Carville
Systems and Network Administrator
310-342-3602
stephen@totalflood.com